cabextract -- directory traversal with UTF-8 symbols in filenamesentered 2015-05-31
no CVE referenced
CVE details
CVE-2015-2060
cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character that is changed to a UTF-8 encoded slash.
- Score
- 5.3 medium
- Published
- 2019-11-29
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.